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October  28,  1991 

The  Honorable  John  Conyers,  Jr. 

Chairman,  Committee  on  Government  Operations 
House  of  Representatives 

Dear  Mr.  Chairman: 

This  report  responds  to  your  November  19, 1990,  request  that  we  review  how  gsa  can  better 
meet  its  legislative  mandate  under  the  Brooks  Act  of  ensuring  that  federal  agencies  procure 
adp  resources  in  an  efficient  and  effective  manner.  We  found  that  gsa  could  do  a  better  job  in 
fulfilling  its  mandate  and  made  recommendations  to  improve  its  oversight  of  agency  adp 
procurements. 


As  agreed  with  your  office,  unless  you  publicly  announce  the  contents  of  this  report  earlier, 
we  plan  no  further  distribution  until  30  days  from  the  date  of  this  letter.  At  that  time,  we 
will  send  copies  to  interested  parties  and  make  copies  available  to  others  upon  request. 

This  report  was  prepared  under  the  direction  of  Jack  L.  Brock,  Jr.,  Director  of  Government 
Information  and  Financial  Management,  who  can  be  reached  at  (202)  275-3195.  Other  major 
contributors  are  listed  in  appendix  II. 

Sincerely  yours, 


Ralph  V.  Carlone 
Assistant  Comptroller  General 
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Executive  Summary 


Purpose 


Background 


The  federal  government  spends  over  $20  billion  yearly  acquiring  com¬ 
puter  hardware  and  software.  The  General  Services  Administration 
(gsa)  is  the  principal  agency  tasked  with  ensuring  that  the  government 
effectively  acquires  and  manages  this  technology,  gsa’s  authority  comes 
from  Public  Law  89-306  (i.e.,  the  Brooks  Act),  which  governs  the  federal 
acquisition  and  management  of  automatic  data  processing  (adi>) 
equipment. 

Because  of  its  concern  over  gsa’s  effectiveness  in  carrying  out  its 
responsibilities,  the  House  Committee  on  Government  Operations  asked 
gao  to  review  gsa’s  role  under  the  Brooks  Act.  Further  discussion  with 
the  Committee  focused  the  review  on  determining  how  gsa  can  better 
meet  its  legislative  mandate  of  ensuring  that  federal  agencies  procure 
adp  resources  in  an  efficient  and  effective  manner. 


The  Brooks  Act  gives  gsa  oversight  responsibility  for  adp  procurements. 
While  individual  agencies  have  the  primary  responsibility  for  making 
sure  that  these  procurements  are  efficient  and  cost-effective,  gsa  plays  a 
critical  role  in  ensuring  the  integrity  of  the  process,  gsa’s  Information 
Resources  Management  Service  has  organizational  responsibility  for  ful¬ 
filling  this  role.  Within  this  organization,  the  Office  of  Federal  Informa¬ 
tion  Resources  Management  has  direct  authority  for  establishing 
acquisition  policy  and  regulations.  It  also  oversees  agencies’  acquisition 
and  management  of  information  technology  primarily  by  (1)  reviewing 
individual  agency  procurement  requests  (aprs)  to  determine  if  a  delega¬ 
tion  of  procurement  authority  (dpa)  is  warranted  and  (2)  conducting 
periodic  procurement  and  management  reviews  to  assess  whether  agen¬ 
cies  are  appropriately  organized  to  carry  out  their  information  resources 
management  (irm)  activities.  Collectively,  these  two  processes  should 
help  agencies  develop  organizational  structures  and  processes  to  effec¬ 
tively  manage  their  irm  activities  and  provide  added  assurance  that  indi¬ 
vidual  procurements  are  being  carried  out  in  an  appropriate  manner. 

gsa  gives  federal  agencies  a  threshold,  usually  $2.5  million,  below  which 
they  can  procure  adp  resources  without  prior  approval.  For  acquisitions 
above  their  threshold,  agencies  must  first  obtain  gsa  approval,  gsa 
approval  is  required  for  hundreds  of  procurements  annually  and  these 
acquisitions  represent  the  vast  majority  of  dollars  spent  by  federal  agen¬ 
cies  on  information  technology.  For  example,  in  fiscal  year  1989,  632 
acquisitions  totaling  over  $18  billion  required  gsa  approval.  In  fiscal 
year  1990,  these  acquisitions  increased  to  735  and  totaled  more  than 
$20  billion. 
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gsa  received  over  700  aprs  in  fiscal  year  1990  requesting  authority  to 
spend  over  $20  billion  for  information  technology  and  services.  These 
aprs  ranged  from  relatively  small  equipment  acquisitions  costing  a  few 
million  dollars  and  taking  about  one  week  for  gsa  to  process,  to  massive, 
highly  complex  acquisitions  costing  hundreds  of  millions  of  dollars  and 
requiring  about  one  month  to  process,  gsa  uses  a  three-tier  review  pro¬ 
cess  whereby  it  categorizes  the  Aprs  into  three  types,  based  primarily  on 
dollar  amount,  and  relies  on  a  small  group  of  analysts  to  review,  cri¬ 
tique,  and  ultimately  accept  or  reject  them.  These  analysts,  in  turn,  rely 
heavily  on  their  own  corporate  knowledge  in  making  critical  decisions 
on  aprs  under  review. 

We  found  that  staffing  instability  within  the  approval  group  made  the 
apr  review  process  less  reliable.  For  example,  gsa  authorized  16  posi¬ 
tions  for  apr  reviews;  however,  as  many  as  6  of  these  positions  were 
vacant  during  the  year.  Further,  apr  analysts  are  frequently  assigned 
outside  the  review  branch  to  meet  emergency  staffing  needs  elsewhere 
in  the  organization.  As  a  result,  the  remaining  analysts  are  required  to 


Staffing  Instability  Makes 
It  More  Difficult  to 
Effectively  Review  APRs 
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Executive  Summary 

increase  an  already  full  work  load  without  the  benefit  of  the  corporate 
knowledge  of  the  rotated  analysts.  Since  our  review,  gsa  has  taken  steps 
to  increase  the  number  of  available  analysts. 

Office  Procedures  Need 
Improvement 

The  procedures  used  to  review  aprs  do  not  facilitate  analysts’  work. 
Existing  filing  methods  make  it  difficult  to  locate  and  use  current  and 
prior  APR  case  files.  Also,  recordkeeping  is  haphazard  and  inconsistent, 
which  means  that  management  does  not  have  the  information  it  needs  to 
assess  whether  an  appropriate  apr  review  was  conducted.  In  addition, 
the  automated  apr  data  base  which  analysts  use  is  inadequate.  It  cannot 
track  aprs  to  ensure  that  agencies  adhere  to  any  conditions  or  restric¬ 
tions  placed  on  the  resulting  delegations.  Also,  it  cannot  collect  informa¬ 
tion  from  apr  reviews,  which  could  be  used  as  indicators  of  systemic 
problems  in  adp  acquisitions. 

GSA  Management  Reviews  GSA  s  procurement  and  management  reviews  are  designed  to  determine 
Need  Broader  Coverage  whether  agencies  are  capable  of  effectively  and  efficiently  managing 

®  their  irm  resources.  Since  its  inception  in  1980,  38  reviews  have  been 

performed.  These  reviews  give  gsa  considerable  leverage  as  they  are 
used  to  determine  whether  an  agency’s  delegation  of  procurement 
authority  should  be  raised,  lowered,  or  left  unchanged,  gsa  currently 
conducts  six  reviews  per  year,  each  taking  approximately  6  months  to 
complete.  However,  staffing  problems  with  the  reviews  are  limiting 
gsa’s  effort. 

In  1990,  gsa’s  Administrator  told  the  Congress  that  he  would  increase 
the  number  of  reviews  to  nine  each  year,  beginning  in  1992.  However, 
with  no  additional  staff  allocated  to  this  program,  gsa  has  had  to 
abandon  its  plan.  Under  current  staffing  levels,  analysts  must  limit  the 
review  scope  to  the  department  level  in  an  agency  in  order  to  conduct  at 
least  six  reviews  each  year.  This  leaves  irm  activities  at  major  bureaus, 
such  as  the  Internal  Revenue  Service  and  the  Federal  Bureau  of  Investi¬ 
gation,  virtually  unaddressed.  In  addition,  the  analysis  performed  is 
sometimes  incomplete  because  the  staff  cannot  take  the  time  to  fully 
address  all  issues.  Nonetheless,  agency  officials  indicate  the  reviews 
help  enhance  irm  operations.  They  believe  that  more  comprehensive 
reviews  focusing  on  irm  organization  and  structure  would  greatly  aid 
them  in  designing  and  implementing  effective  control  mechanisms  for 
acquiring  adp  systems. 
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GSA  Has  No  System  to 
Assess  the  Value  of 
Oversight  Activities 


Recommendations 


GSA  has  no  system  to  assess  the  value  of  its  oversight  activities.  Without 
such  a  system  gsa  cannot  determine  if  it  is  focusing  its  programs  on  the 
greatest  need  nor  assess  the  value  of  its  efforts.  First,  it  does  not  mea¬ 
sure  or  quantify  the  results  it  receives  from  each  type  of  apr  review  to 
determine  whether  its  review  effort  per  apr  type  is  appropriate.  Thus,  it 
has  no  quantifiable  base  to  determine  the  impact  of  its  plans  to  eliminate 
its  apr  reviews  of  low-dollar  procurements.  Second,  it  does  not  assess 
the  value  added  by  apr  and  procurement  and  management  reviews  to 
learn  how  they  can  best  help  agencies.  Finally,  gsa  is  not  performing 
systematic  analyses  of  problems  uncovered  in  individual  apr  reviews 
and  procurement  and  management  reviews  to  identify  and  address  sys 
temic  problems  that  could  be  endemic  to  procurements  of  a  particular 
type  or  by  a  particular  agency. 


gsa  needs  to  make  more  effective  use  of  its  primary  oversight  tools — the 
apr  review  process  and  the  procurement  and  management  reviews — to 
provide  greater  assurance  that  the  government’s  adp  resources  are  eco¬ 
nomically  and  efficiently  procured.  To  do  so,  we  recommend  that  the  gsa 
Administrator  take  the  following  actions. 

•  Collect  and  analyze  data  on  the  problems  identified  through  the  apr 
reviews  and  use  this  information  to  assess  the  value  added  by  each  type 
of  review.  If  necessary,  revise  the  three-tier  review  process  so  that  gsa’s 
limited  apr  resources  can  be  most  effectively  used. 

•  Improve  the  operating  efficiency  of  the  apr  review  process  by 

1 .  enhancing  the  APR  data  base  so  that  it  will  accurately  and  automati¬ 
cally  show  whether  any  conditions/restrictions  placed  on  individual 
delegations  are  on  schedule,  due,  or  past  due;  and 

2.  developing  filing  and  workpaper  procedures  that  will  assist  analysts 
in  locating  apr  submissions  and  provide  a  means  to  verify  that  appro¬ 
priate  gsa  reviews  have  been  conducted. 

•  Implement  follow-up  and  assessment  procedures  to  validate  the  useful¬ 
ness  of  the  procurement  and  management  reviews.  Such  procedures 
should  include  a  tracking  system  to  identify  the  corrective  actions  taken 
by  agencies  as  a  result  of  these  reviews.  This  information  should  be  used 
to  determine  whether  the  reviews  should  be  ( 1 )  expanded  in  scope  to 
include  major  organizational  components  below  the  department  level, 
and  (2)  increased  so  that  agencies  are  reviewed  more  frequently  and 
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Executive  Summary 


receive  timely  information  on  how  to  best  manage  their  irm  and  procure¬ 
ment  activities. 

•  Use  the  results  of  gsa’s  oversight  reviews  to  identify  systemic  problems 
that  require  special  attention. 

Details  on  these  recommendations  are  presented  in  chapter  3. 


Agency  Comments 


As  requested  by  the  Chairman’s  office,  gao  did  not  obtain  agency  com¬ 
ments  on  a  draft  of  this  report. 
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Chapter  1 _ 

Introduction 


Over  50,000  computer  systems  help  manage  every  facet  of  government 
operations.  These  systems — excluding  Defense  embedded  and  classified 
systems — cost  over  $20  billion  yearly.  Over  $6  billion  is  spent  annually 
to  acquire  the  essential  hardware  and  software  that  comprise  the  heai  t 
of  these  systems.  Agencies  expect  this  technology  to  meet  their  esca¬ 
lating  demands  for  increased  productivity,  and  the  public  expects  that 
money  spent  for  this  technology  is  not  wasted. 


GSA  Has  Oversight 
Responsibility  for 
ADP  Policy  and 
Procurement 


Agencies  have  primary  responsibility  for  assuring  that  their  acquisition 
of  information  technology  is  effective,  efficient,  and  in  accordance  with 
federal  regulations.  However,  gsa  has  a  major  role  to  play  in  this  pro¬ 
cess,  both  in  terms  of  assisting  agencies  in  developing  appropriate  proce¬ 
dures  for  technology  acquisition  and  in  assuring  that  those  acquisitions 
meet  the  government’s  needs.  This  authority  comes  largely  from  the 
Brooks  Act.1  Under  this  Act.  the  Administrator  of  gsa  prescribes  policies 
and  regulations  that  agencies  must  follow  to  procure,  lease,  and  main¬ 
tain  adp  resources. 

gsa’s  Information  Resources  Management  Service  (irms),  which  consists 
of  six  offices  with  a  total  authorized  staffing  level  of  1 .373.  is  respon¬ 
sible  for  fulfilling  the  legislative  mandate  of  the  Brooks  Act.  This  organi¬ 
zation  provides  technical  assistance,  administers  government 
procurement  programs,  manages  gsa's  internal  information  resources 
management  (irm)  efforts,  and  controls  nationwide  telecommunications 
services.  The  missions  and  activities  of  the  six  ihms  offices  are  described 
in  appendix  I. 

IRMS’  Office  of  Federal  Information  Resources  Management  provides 
oversight  of  agency  automatic  data  processing  (adp)  procurements  and 
irm  activities.  Within  this  office,  the  Authorizations  Branch  and  the  Pro¬ 
curement  and  Management  Reviews  Branch  conduct  specific  adp  over¬ 
sight  activities  required  under  the  Brooks  Act.  Specifically,  the 
Authorizations  Branch,  with  22  authorized  staff  positions,  reviews 
agency  requests  for  authority  to  procure  adp  systems  and  equipment. 
The  Procurement  and  Management  Reviews  Branch,  with  17  authorized 
staff  positions,  conducts  irm  reviews  at  selected  agencies  and  manages 
the  Federal  IRM  Review  Program,  through  which  agencies  report  on  their 
irm  activities.  Our  review  focused  on  the  functions  of  these  two  branch 
offices. 


'The  Brooks  Act.  which  amended  the  Federal  Property  and  Administrative  Services  Act  of  HMS*. 
lAiblic  I  .aw  <  III  V  SC  7r>9).  was  passed  in  Ifttio 
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Introduction 


Process  for  Approving 
Agency  Procurements 


Federal  agencies  must  obtain  gsa  authorization,  referred  to  as  a  delega¬ 
tion  of  procurement  authority  (dpa),  for  all  adp  acquisitions  above  a 
threshold  dollar  amount  (usually  $2.5  million).2  Agencies  submit  an 
agency  procurement  request  (apr)  to  gsa’s  Authorizations  Branch.  The 
Branch’s  analysts  then  review  the  request  to  determine  whether  to 
grant  a  dpa.  During  fiscal  year  1989,  analysts  reviewed  632  aprs  totaling 
over  $18  billion  and  in  fiscal  year  1990  they  reviewed  735  aprs  worth 
over  $20  billion. 

Before  fiscal  year  1989.  gsa  reviewed  all  aprs  in  the  same  manner, 
regardless  of  dollar  value  or  potential  risk.  Ir.  February  1990,  in  an 
effort  to  further  enhance  its  oversight  of  individual  procurements  and 
provide  a  more  comprehensive  review  of  high-dollar,  high-risk  acquisi¬ 
tions,  gsa  developed  a  new  apr  model.  This  model  provides  three  tiers  of 
review  for  aprs,  as  shown  in  figure  1.1. 


“Federal  Information  Resources  Management  Regulation  201-20.305-1,  Regulatory  Delegations,  estab¬ 
lishes  amounts  above  which  agencies  must  obtain  GSA  approval  to  conduct  their  procurements 
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Figure  1.1:  GSA’s  APR  Review  Process 


Type  III,  Comprehensive  Reviews,  involve  high-dollar.  high-visibility, 
high-risk,  and  Priority  System  Procurements.’  Type  III  reviews  are  to  be 
completed  within  30  days  after  the  apr  is  formally  received  by  gsa. 

They  generally  comprise  about  5  percent  of  the  aprs  received  annually. 
These  reviews  are  intended  to  allow’  gsa  to  become  familiar  with  the 
complete  information  system  or  adp  project  of  which  the  apr  is  a  part. 


'ifigh-dollar  procurements  generally  exceed  $P*»  million  while  high-visihility  aixitiiMlions  <mntain 
known  risks  Priority  System  Procurements  are  acquisitions  that  exceed  $r>(l  million  and  sup|«>rt  an 
agency's  miqnr  information  system  initiative 
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Process  for  Reviewing 
Agency  IRM  Organization 


Type  III  reviews  require  detailed  evaluations  of  essential  procurement 
documents,  such  as  the  requirements  analysis,  alternative  study,  and 
software  conversion  study.  The  review  also  involves  meetings  with 
agency  officials  and  detailed  assessments  of  the  agency’s  project  plan, 
including  expected  results,  cost,  and  schedule.  Because  of  their  high  cost 
and  potential  sensitivity,  agencies  frequently  send  in  draft  aprs  for  gsa 
to  comment  on.  Agency  officials  will  also  meet  with  gsa  analysts  before 
they  submit  a  formal  apr.  This  period  of  review  is  not  included  in  the 
30-day  completion  estimate. 

Type  II,  Abbreviated  Reviews,  involve  sole-source  procurements  that 
exceed  $5  million,  procurements  with  a  history  of  significant  problems, 
and  procurements  not  selected  for  type  III  reviews.  Type  II  reviews  are 
to  be  processed  within  20  working  days  and  represent  about  65  percent 
of  the  aprs  submitted  annually.  The  reviews  involve  ensuring  that  the 
information  submitted  on  the  APR  is  in  compliance  with  regulations,  that 
the  apr  contains  appropriate  certifications,  and  that  required  studies 
have  been  completed.  Analysts  performing  type  II  reviews  also  deter¬ 
mine  whether  there  are  any  areas  of  concern,  such  as  the  age  of  the 
system  to  be  upgraded  or  special  telecommunications  requirements, 
which  warrant  special  attention.  Analysts  will  also  meet  with  agency 
officials  to  clarify  or  obtain  more  details  on  the  apr  if  necessary. 

Type  I,  Accelerated  Reviews,  are  the  least  detailed  and  involve  competi¬ 
tive  procurements  totaling  less  than  $50  million  and  sole-source  procure¬ 
ments  of  less  than  $5  million.  They  also  include  all  aprs  not  selected  for 
the  other  types  of  reviews,  gsa  requires  type  I  reviews  to  be  completed 
within  5  working  days  after  the  apr  is  formally  received.  According  to 
gsa’s  Administrator,  type  I  reviews  cover  about  30  percent  of  the  aprs 
annually  received.  These  reviews  consist  primarily  of  a  cursory  review 
of  the  apr  contents  and  a  check  to  ensure  that  the  apr  includes  appro¬ 
priate  certifications  and  is  in  compliance  with  prescribed  regulations. 


gsa  also  conducts  information  resources  procurement  and  management 
reviews,  which  are  intended  to  assess  agencies’  effectiveness  in  man¬ 
aging  their  ikm  activities.  These  reviews  are  much  broader  than  apr 
reviews  because  they  address  various  issues  relating  to  an  agency’s  IRM 
organization,  structure,  and  operations,  and  not  just  a  single  acquisition 
In  addition,  these  reviews  are  used  as  a  basis  for  adjusting  an  agency's 
dpa  threshold,  gsa’s  Procurement  and  Management  Reviews  Branch  has 
conducted  38  reviews  since  the  program  began  in  1980. 
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Objectives,  Scope,  and 
Methodology 


In  conducting  procurement  and  management  reviews,  gsa  analysts 
assess  agency  documentation  and  procedures,  and  meet  with  agency 
officials  to  evaluate  the  agency’s  planning  and  control  mechanisms.  The 
analysts  determine  if  the  agency  is  acquiring,  using,  and  managing  its 
adp  resources  in  an  efficient  and  economical  manner.  Analysts  also 
verify  an  agency’s  compliance  with  prescribed  regulations  and  with  any 
conditions  or  limitations  placed  on  recently  received  dpas.  Typically,  the 
reviews  are  conducted  and  a  report  written  within  6  months.  After  the 
report  is  issued,  the  agency  is  required  to  submit  an  action  plan  to  gsa 
outlining  how  it  will  implement  any  report  recommendations. 

The  review  findings  have  a  direct  link  to  how  much  an  agency  is  allowed 
to  spend  on  adp  resources  without  seeking  gsa  approval.  On  the  basis  of 
its  review,  gsa  may  raise  or  lower  an  agency’s  dpa  threshold.  Between 
1985  and  1990,  seven  reviews  resulted  in  significant  dpa  threshold 
increases  ranging  from  a  100-percent  increase  (to  $5  million)  to  a 
600-percent  increase  (to  $17  million).  During  the  same  time,  the  dpa 
threshold  for  each  of  three  agencies  was  lowered  80  percent  (to 
$500,000). 

gsa  also  manages  the  Federal  irm  Review  Program,  a  mechanism  to  col¬ 
lect  information  on  governmentwide  irm  trends.  Under  gsa  guidance,  46 
agencies  presently  conduct  self-assessments  and  report  on  hundreds  of 
irm  management  and  procurement  initiatives  each  year,  gsa’s  Procure¬ 
ment  and  Management  Reviews  Branch  receives  the  reports  and  summa¬ 
rizes  each  agency’s  accomplishments  in  an  overall  federal  assessment  on 
the  state  of  irm.  This  summary  is  submitted  to  the  Office  of  Management 
and  Budget  (omd),  which,  in  turn,  sends  it  to  the  appropriate  congres¬ 
sional  committees.4 


In  November  1990,  the  Chairman,  House  Committee  on  Government 
Operations,  asked  us  to  conduct  a  review  of  gsa’s  implementation  of  the 
Brooks  Act,  and  to  determine  whether  gsa  is  effectively  implementing 
its  statutory  mandate  to  coordinate  and  provide  for  the  economic  and 
efficient  purchase,  lease,  and  maintenance  of  adp  equipment  by  federal 
agencies.  Further  discussion  with  the  Chairman’s  office  focused  the 
review  on  describing  the  various  gsa  components  that  have  Brooks  Act 
responsibilities  and  determining  how  gsa  can  better  meet  its  legislative 


4Thi>  Paperwork  Reduction  Act  of  requires  that  the  rejsirt  lie  sent  to  the  Senate  and  House 
Appropriations  Committees.  Senate  Committee  on  Governmental  Affairs,  and  House  Committee  on 
Government  Operations. 
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mandate  of  ensuring  that  federal  agencies  procure  adp  resources  in  an 
efficient  and  effective  manner. 

To  gain  a  clear  understanding  of  gsa’s  oversight  role,  we  examined  the 
Brooks  Act,  the  Paperwork  Reduction  Act,  and  implementing  regula¬ 
tions.  We  interviewed  the  Assistant  Commissioners  and  other  gsa  offi¬ 
cials  in  each  of  the  six  offices  in  IRMS.  We  also  obtained  documentation 
from  these  offices  detailing  their  responsibilities  under  the  Brooks  Act. 

To  analyze  gsa’s  criteria  for  granting  dpas,  we  reviewed  govem- 
mentwide  adp  acquisition  regulations  and  gsa  guidance  to  agencies.  We 
reviewed  office  procedures,  dpa  work-load  statistics,  and  the  sufficiency 
of  record  keeping.  We  observed  working  conditions,  identified  time  con¬ 
straints,  and  assessed  the  availability  of  resources.  Additionally,  we 
examined  gsa’s  new  delegations  model  to  assess  the  three  types  of 
reviews  performed  on  aprs  and  analyzed  16  completed  apr  case  files  to 
determine  the  extent  of  each  type  of  review.  Our  analysis  included  two 
files  that  pertained  to  aprs  submitted  under  gsa’s  Trail  Boss  Program.* 
We  did  not  evaluate  the  decisions  made  by  gsa  analysts  to  approve  or 
deny  aprs.  Instead,  we  assessed  the  apr  review  process,  including 
staffing,  office  environment  and  procedures,  the  automated  system  for 
tracking  apr  cases,  and  work  load  to  determine  whether  the  apr  review 
process  is  efficient  and  effective. 

In  addition,  we  reviewed  nine  information  resources  procurement  and 
management  reports  and  talked  with  gsa  officials  involved  with  the 
reviews  to  determine  the  scope  and  sufficiency  of  gsa’s  analysis.  We  also 
reviewed  gsa  procedures  for  implementing  the  Federal  irm  Review 
Program. 

To  obtain  agency  input  on  whether  gsa  could  better  carry  out  its  irm 
responsibilities  under  the  Brooks  Act,  we  met  with  officials  at  the  Office 
of  Management  and  Budget,  the  Department  of  Health  and  Human  Ser¬ 
vices,  the  Department  of  Labor,  and  the  Department  of  the  Interior.  In 
addition,  we  contacted  officials  at  the  Department  of  Veterans  Affairs 
and  the  Department  of  the  Army  to  obtain  their  views  on  the  value  gsa 
adds  to  the  federal  acquisition  process. 


’The  Trail  Boss  Program  provides  special,  concentrated  training  to  senior  agency  IRM  managers  to 
provide  them  with  current  insights  and  tools  to  solve  the  complex  problems  involved  in  major,  long¬ 
term  ADP  and  telecommunications  acquisitions. 
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We  discussed  the  facts  in  this  report  with  gsa  officials  and  have  incorpo¬ 
rated  their  comments  where  appropriate.  However,  in  accordance  with 
the  requester’s  wishes,  we  did  not  obtain  agency  comments  on  a  draft  of 
the  report.  We  conducted  our  work  from  November  1990  through  Sep¬ 
tember  1991,  in  accordance  with  generally  accepted  government 
auditing  standards. 
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For  over  two  decades  gsa  has  grappled  with  the  challenge  of  effectively 
discharging  its  governmentwide  adp  oversight  responsibilities.  Even 
though  gsa  has  taken  some  positive  steps  to  address  this  challenge, 
agency  actions  still  result  in  poorly  designed,  poorly  managed  procure¬ 
ments.  gsa’s  management  of  the  procurement  review  process  is  not  well 
focused,  with  staffing  problems  and  poor  internal  procedures  limiting 
gsa’s  effectiveness  in  reducing  acquisition  risks.  In  addition,  gsa’s  pro¬ 
curement  and  management  reviews,  which  can  help  agencies  enhance 
their  ability  to  develop  good  irm  processes  and  procedures,  are  limited  in 
number  and  scope.  Further,  the  information  reported  under  the  Federal 
irm  Review  Program  is  not  useful  because  it  is  incomplete  and  gsa  does 
not  ensure  that  it  is  accurate,  gsa  acknowledges  its  problems  and  is  stud¬ 
ying  alternatives.  However,  it  is  not  collecting  and  analyzing  the  infor¬ 
mation  needed  to  make  informed  decisions. 


Historically,  Agency 
ADP  Procurements 
Have  Been  Poorly 
Designed  and 
Conducted 


Many  gao  reports  over  the  past  several  years  have  documented  agen¬ 
cies’  poor  performance  in  acquiring  multi-million  dollar  adp  systems.  In 
1989  testimony,'  we  stated  that  for  the  dozens  of  systems  reviewed  by 
gao  over  the  past  4  years,  there  was  very  little  that  was  positive.  Unfor¬ 
tunately,  this  statement  continues  to  be  true.  For  example,  in  June 
1989, 2  gao  recommended  that  the  Navy  stop  ordering  hardware  and 
software  for  its  Standard  Civilian  Pay  System  from  a  particular  con¬ 
tractor  because  the  $26.7  million  contract  had  been  awarded  on  the 
basis  of  an  improperly  restricted  competition  and  the  Navy  had  found 
that  its  system  design  would  not  work.  In  April  1990, 3  gao  found  that 
the  Office  of  Personnel  Management’s  $54-million  Federal  Employees 
Retirement  System  Automated  Processing  System  procurement  was  too 
restrictive,  thus  limiting  the  range  of  vendors  who  could  bid  on  the  con¬ 
tract.  In  May  and  June  1990, 4  gao  recommended  that  the  Federal  Avia¬ 
tion  Administration’s  Computer  Resources  Nucleus  project  not  be 
awarded.  The  $  1 . 5-billion  project  had  not  been  properly  justified  or 
planned  and  it  improperly  restricted  competition.  In  each  case,  senior 


'Statement  of  Ralph  V  Carlone  before  the  Subcommittee  on  Government  Information  and  Regulation, 
Senate  Committee  on  Governmental  Affairs  (GAO/T-IMTEC-89-9,  June  12.  1989). 

2 ADP  Procurement:  Navy  Improperly  Restricted  Competition  for  Its  Civilian  Pay  System 
(GAO/lMtEC-89-61,  June  21 .  1989). 


3Retirement  System:  Concerns  About  OPM's  FF.RS  Automated  Processing  System  Procurement 
(GAO/IMTEC-90-45.  Apr  -1,  1990). 

4FAA  Procurement.  Major  Data-lVocessing  Contract  Should  Not  Be  Awarded  (GAO/IMTEC- 90-38, 
May  25,  1990);  FA  A  Procurement:  Competition  for  Major  Data-Processing  Contract  Was  l'r\justifiably 
Umited  (GAO/IMTEC-90-71 .  June  1 1.  1990). 
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agency  acquisition  managers  were  involved  with  the  project  and  gsa  had 
reviewed  and  approved  the  apr. 

In  addition,  these  and  other  gao  reports  have  indicated  that  many  pro¬ 
curement  problems  occur  during  the  acquisition  phase  when  agencies 
inadequately  or  inappropriately  define  system  requirements,  misjudge 
user  needs,  or  poorly  compute  cost/benefit  measurements.  Common  to 
most  of  these  procurements  is  a  lack  of  agency  oversight  in  assuring 
that  prescribed  federal  regulations  are  followed. 


APR  Process  Gives  No 
Reasonable  Assurance 
That  Acquisition  Risks 
Are  Reduced 


Staff  instability  and  an  increasing  work  load,  combined  with  inadequate 
record  keeping  and  office  procedures,  have  effectively  limited  gsa’s 
ability  to  properly  review  aprs.  Hundreds  of  aprs  are  reviewed  annually 
by  a  small  number  of  analysts  who  are  continually  being  transferred 
between  gsa  branch  offices.  In  addition,  office  procedures  for  con¬ 
ducting  individual  apr  reviews  are  ineffective  and  do  little  to  assist  ana¬ 
lysts.  Similarly,  the  automated  system  used  to  track  adp  procurements  is 
inadequate  and  unreliable.  These  failings  effectively  limit  gsa's  ability  to 
provide  reasonable  assurance  that  its  analysis  of  agency  procurement 
requests  is  reducing  acquisition  risks. 


Staff  Instability 
Contributes  to  Increased 
Work  Load  and  Cursory 
Reviews 


The  Authorizations  Branch  has  experienced  continual  staffing  problems. 
Since  December  1989,  the  Branch  has  had  22  authorized  staff  positions, 
of  which  16  are  dedicated  to  the  apr  reviews.  The  remaining  authorized 
staff  provide  administrative  and  technical  support.  However,  between 
December  1989  and  April  1991,  this  Branch  averaged  three  vacancies 
per  month,  while  each  month  three  additional  staff,  on  average,  were 
detailed  outside  the  Branch.  In  all,  almost  40  percent  of  the  staff  dedi¬ 
cated  to  apr  reviews  were  unavailable  to  review  aprs. 


The  staffing  shortage  increases  the  already  tremendous  work  load  of  the 
Authorizations  Branch  staff.  Analysts  said  that  they  often  work  on  as 
many  as  13  or  14  cases  simultaneously.  These  cases  range  from  cursory 
checks  to  verify  that  apr  paperwork  is  in  compliance  with  federal  regu¬ 
lations  to  detailed  analysis  of  an  agency’s  acquisition  strategy  and  sup¬ 
porting  studies.  Time  to  complete  such  tasks  ranges  from  5  to  over  30 
days.  One  analyst  said  that  her  work  load  sometimes  includes  five  of  the 
difficult  comprehensive  type  III  reviews,  each  of  which  would  require  a 
month  or  more  to  complete.  Another  analyst  told  us  that  he  was  cur¬ 
rently  working  on  18  apr  reviews.  These  analysts  indicated  that  this 
burdensome  work  load  often  keeps  them  from  providing  comprehensive 
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assessments.  The  analysts  also  noted  that  they  seldom,  if  ever,  take  the 
time  to  research  other  files,  which  might  provide  information  necessary 
to  effectively  process  the  apr. 


Office  Environment  and 
Information  System  Do 
Little  to  Assist  Analysts 


The  physical  environment  in  which  aprs  are  reviewed  is  cluttered,  disor¬ 
ganized,  and  inefficient,  apr  case  files  are  stored  on  window  sills,  under 
desks,  in  bookcases,  and  on  already  filled  filing  cabinets.  Space  limita¬ 
tions,  a  large  volume  of  paper  records,  many  boxes  of  records  with  few 
discemable  labels,  and  the  lack  of  a  case  charge-out  system  makes  it 
difficult,  and  sometimes  impossible,  to  locate  files.  Files  are  generally 
passed  around  within  the  branch  and  to  other  branch  offices  without  a 
controlling  sign-out  procedure.  As  a  result,  analysts  must  rely  on  their 
memory  to  recall  where  a  file  is  located.  At  times  no  one  knows  where  a 
particular  file  is  located.  It  took  analysts  several  days  to  locate  the  apr 
case  files  we  asked  to  review. 


Our  review  of  APR  case  files  identified  numerous  files  that  did  not  con¬ 
tain  sufficient  documentation  to  reasonably  support  the  conclusions  and 
recommendations  to  either  approve  or  deny  the  apr.  Files  were  not  cur¬ 
rent  or  updated  and  it  was  difficult  to  determine  whether  documenta¬ 
tion  requested  from  an  agency  was  received  or  whether  follow-up  by  gsa 
analysts  occurred.  When  we  interviewed  analysts  we  found  that  they 
kept  numerous  pieces  of  documentation,  not  in  official  files,  but  in  their 
own  personal  files.  However,  analysts  demonstrated  “corporate  knowl¬ 
edge”  of  agency  activities  and  frequently  recalled  the  specifics  involved 
in  particular  apr  reviews.5 

To  help  organize  and  track  the  location  of  apr  case  files  and  to  improve 
record  keeping,  gsa  developed  a  personal-computer-based  apr  data  base 
management  information  system  in  1989.  This  system  contains  basic 
information  such  as  the  apr  case  number  and  status,  agency  involved, 
analyst  assigned,  dollars  involved,  and  type  of  review  to  be  conducted. 
However,  the  data  base  does  not  contain  information  on  the  specific 
restrictions  and  conditions  that  are  required  of  an  agency  as  part  of  its 
dpa.  gsa  frequently  will  place  certain  restrictions  and  conditions  on  an 
agency  to  ensure  that  the  procurement  is  carried  out  in  accordance  with 
gsa  guidelines.  In  addition,  agencies  usually  are  required  to  submit  peri¬ 
odic  status  reports  to  gsa  on  their  procurement  efforts.  This  information 


RIncluded  in  our  review  of  APR  case  files  were  two  Trail  Boss  APRs.  We  found  that  the  documenta¬ 
tion  retained  in  these  files  was  more  detailed  and  that  notes  from  delegation  analysts  provided  better 
evidence  of  interaction  with  agency  personnel.  Because  of  their  high  dollar  impact.  Trail  Boss  acquisi¬ 
tions  are  almost  always  selected  for  a  type  III  review. 
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Can  Help  Agencies, 
but  Currently  They 
Are  Limited 


is  not  reflected  in  the  data  base  and,  as  a  result,  analysts  have  no  auto¬ 
matic  way  of  being  notified  when  required  reports  are  due.  Lacking  this 
automated  information,  an  analyst  must  locate  and  research  the  case 
file  to  identify  any  restrictions  and  then  contact  the  agency  to  inquire 
about  them.  Since  the  analysts  have  a  heavy  work  load  and  little  time  to 
manually  research  the  files  and  take  appropriate  follow-up  action,  gsa 
has  no  assurance  that  provisions  required  as  part  of  its  dpa  are  being 
fulfilled. 

Additionally,  we  found  that  the  data  base  contained  errors.  For 
example,  in  some  instances  the  apr  dollar  amounts  contained  in  the  data 
base  were  incorrect  and  certain  apr  case  files  were  not  listed  in  the  data 
base.  This  information  is  critical  for  gsa  to  maintain  an  accurate 
accounting  for  all  agency  acquisitions. 


Unlike  apr  reviews,  which  focus  only  on  whether  an  individual  procure¬ 
ment  is  in  compliance  with  federal  regulations,  information  resources 
procurement  and  management  reviews  are  designed  to  help  agencies 
better  manage  their  irm  activities.  In  addition,  gsa  has  considerable  lev¬ 
erage  with  these  reviews  in  that  they  are  used  to  adjust  agency  dpa 
thresholds.  However,  staffing  problems  with  the  reviews  are  limiting 
gsa’s  effort  and  contributing  to  a  lack  of  professional  diligence. 

Staffing  problems  have  persisted  for  over  1-1/2  years.  For  the  19-month 
period  ending  April  1991,  the  Procurement  and  Management  Reviews 
Branch  experienced  a  consistent  staffing  shortage.  Staffing  levels  fluc¬ 
tuated  from  a  low  of  10  to  a  high  of  17,  with  an  average  of  15  positions 
filled  during  the  period.  To  compensate  for  vacancies,  an  average  of 
four  staff  were  detailed  to  the  branch  each  month,  while  an  average  of 
two  positions  remained  unfilled.  During  7  of  the  19  months  the  Branch 
was  managed  by  an  acting  Branch  chief  who  was  detailed  from  another 
gsa  office.  According  to  the  current  Branch  chief,  some  review  analysts 
during  this  period  were  not  motivated  and  others  were  not  qualified  to 
conduct  procurement  and  management  reviews.  Additionally,  an 
internal  review  found  that  the  heavy  work  load,  the  stress  connected 
with  continued  tight  timeframes,  and  requiring  staff  to  work  35  percent 
overtime  to  meet  review  objectives  contributed  to  high  staff  turnover, 
“burnout,”  and  no  time  for  training.  The  quality  of  the  work  also 
suffered. 

We  found  that  gsa’s  procurement  and  management  review  teams  rou¬ 
tinely  work  on  four  reviews  at  any  one  time.  For  example,  a  team  will 
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start  a  new  review  while  still  on  site  with  another  review.  At  the  same 
time,  the  team  will  be  drafting  the  report  for  a  third  review  and 
answering  agency  comments  on  a  fourth.  The  Branch  chief  told  us  that 
because  of  this  work  load,  it  is  impossible  for  analysts  to  verify  compli¬ 
ance  with  all  requirements.  As  a  result,  she  admitted  that  the  analysis 
performed  is  sometimes  compromised  to  meet  deadlines.  She  explained 
that  at  times  gsa  could  do  a  better  job  in  collecting  and  analyzing  infor¬ 
mation  to  make  final  decisions  on  whether  to  raise  or  lower  an  agency’s 
dpa  threshold.  This  belief  was  supported  by  an  Inspector  General’s 
report,1 6  which  noted  procedural  weaknesses  affecting  the  quality  of  the 
reviews.  The  report  stated  that  workpapers  were  not  prepared  with  due 
professional  care  and  that  inadequate  documentation  made  it  difficult  to 
ensure  that  procurement  reviews  were  fair,  objective,  and  reliable. 

The  Director  of  the  Authorizations  and  Management  Reviews  Division 
believes  the  key  to  strengthening  gsa’s  adp  oversight  rests  with  informa¬ 
tion  resources  procurement  and  management  reviews.  He  stated  that 
these  reviews  serve  as  stepping  stones  to  teach  agencies  how  to  better 
operate  their  irm  organizations.  For  example,  as  a  result  of  recent  pro¬ 
curement  and  management  reviews,  gsa  has  recommended  that  senior 
agency  officials  demonstrate  a  commitment  to  irm  and  implement  a  stra¬ 
tegic  information  systems  planning  process  and  better  acquisition  plan¬ 
ning  policies  and  procedures,  gsa  has  also  recommended  that  agency  irm 
officials  establish  procedures  for  consolidating  acquisitions  and  for 
ensuring  that  APR-certified  and  DPA-required  studies  are  conducted,  doc¬ 
umented,  and  maintained  in  accordance  with  regulations.  In  addition, 
gsa  directed  an  agency  to  initiate  a  comprehensive,  independent  audit  of 
procurement  management  and  contract  administration  in  the  agency’s 
adp  support  services  and  telecommunications  services  areas. 

Agency  officials  believe  that  gsa  does  add  considerable  value  with  these 
reviews.  For  example,  Health  and  Human  Services  officials  told  us  that 
as  a  result  of  a  gsa  procurement  and  management  review  they  took 
action  to  strengthen  their  irm  operations.  They  increased  resources, 
developed  a  comprehensive  irm  policy,  and  implemented  an  action  plan 
to  address  gsa’s  recommendations.  Officials  at  other  agencies  noted  that 
their  dialogue  with  gsa  on  various  review  issues  provided  constructive 
direction  on  how  to  improve  irm  operations. 


''Review  of  GSA  Delegations  of  Procurement  Authority  For  Automated  Data  I’nxvssing  Resources. 
Office  of  Insi«H1or  General.  General  Services  Administration.  Mar.  29.  1991 . 
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Federal  IRM  Review 
Program  Is  Inadequate 


gsa  realizes  the  value  these  reviews  can  add  to  govemmentwide  irm 
activities.  In  fiscal  year  1990,  gsa  doubled  the  annual  number  of  pro¬ 
curement  and  management  reviews  from  three  to  six.  In  his  September 
1990  testimony,7  gsa’s  Administrator  stated  that,  beginning  in  1992,  gsa 
will  increase  its  information  resources  and  management  reviews  from 
six  to  nine  each  year.  However,  a  request  for  additional  staff  to  support 
these  reviews  was  denied  by  gsa  management.  As  a  result,  Branch  offi¬ 
cials  told  us  they  have  since  abandoned  these  plans.  Consequently,  gsa 
currently  plans  to  conduct  only  six  reviews  during  1992.  At  this  rate,  it 
will  take  gsa  over  4  years  to  review  all  of  the  largest  federal  agencies.  In 
addition,  procurement  and  management  reviews  will  continue  to  pre¬ 
dominately  focus  on  the  department  level  of  an  agency  resulting  in  vir¬ 
tually  no  guidance  being  provided  to  agency  bureaus.  Thus,  large 
government  organizations  such  as  the  Federal  Bureau  of  Investigation 
and  the  Internal  Revenue  Service  will  not  be  reviewed. 


gsa  manages  the  Federal  irm  Review  Program,  which  requires  agencies 
to  conduct  self-assessments  and  report  to  gsa  on  their  irm  and  adp  pro¬ 
curement  initiatives,  gsa  collects  this  information  and  provides  a 
govemmentwide  compilation  of  irm  trends.  However,  gsa  does  not  inde¬ 
pendently  validate  the  information  and  does  not  know  whether  the 
information  it  summarizes  and  reports  to  omb  is  accurate  or  complete. 

The  purpose  of  the  Federal  irm  Review  Program  is  to  report  to  the  Con¬ 
gress  on  whether  agencies  are  (1)  carrying  out  their  information  man¬ 
agement  activities  in  an  efficient,  effective,  and  economical  manner;  and 
(2)  complying  with  established  irm  policies,  procedures,  principles,  stan¬ 
dards,  and  guidelines.  The  amount  of  data  collected  under  the  Federal 
irm  Review  Program  is  voluminous.  In  fiscal  year  1989,  agencies  sub¬ 
mitted  854  reports  to  gsa.  However,  gsa  found  that  agencies  reported 
only  their  accomplishments  and  did  not  adequately  address  improve¬ 
ments  needed  in  their  information  systems.  As  a  result,  gsa  could  not 
identify  agency  weaknesses  or  assess  how  they  affected  the  agencies’ 
adp  procurement  programs.  In  addition,  the  information  collected  is 
reported  to  the  Congress  for  information  purposes  only.  The  Congress 
does  not  use  it  to  address  agency  funding  or  operations. 


Statement  of  Richard  G.  Austin,  Administrator,  GSA,  before  the  Subcommittee  on  legislation  and 
National  Security,  House  Committee  on  Government  Operations.  Sept.  IS,  l!t!M) 
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According  to  a  1991  internal  gsa  report  on  the  Federal  irm  Review  Pro¬ 
gram,  the  Branch  office  does  not  have  the  personnel  to  verify  the  com¬ 
pleteness  and  accuracy  of  the  information  being  reported  or  properly 
analyze  it.  Complete  and  accurate  reporting  by  agencies  would  help  gsa 
identify  systemic  weaknesses  and  focus  on  those  systems  that  are  mis¬ 
sion-critical  to  the  agency  and  to  the  operation  of  the  federal  govern¬ 
ment.  Additionally,  gsa’s  analysis  of  the  data  could  provide  information 
on  how  agencies  manage  their  major  information  resources,  how  they 
apply  these  resources  to  accomplishing  their  mission,  and  what  the  cur¬ 
rent  trends  are  in  governmentwide  irm  activities.  However,  given  the 
volume  of  reports  to  be  analyzed  in  a  year  and  gsa’s  current  resources,  it 
cannot  use  the  information  as  intended. 


Over  the  past  few  years,  gsa  has  taken  steps  to  improve  the  federal  adp 
procurement  process.  Specifically,  gsa  established  the  Go-For-12  and 
Trail  Boss  programs,8  which  facilitate  the  procurement  process  and  pro¬ 
vide  training  to  agency  officials  in  order  to  improve  acquisition  skills 
and  abilities.  In  addition,  gsa  recently  received  tentative  approval  to 
take  over  the  Air  Force  Computer  Acquisition  Center,  gsa  plans  to  use 
this  center’s  adp  contract  management  expertise  to  work  with  agency 
procurement  officials  to  strengthen  their  management  of  adp 
acquisitions. 

Nonetheless,  gsa  officials  recognize  that  many  challenges  still  face  their 
organization  and  realize  that  in  this  era  they  are  not  likely  to  get  addi¬ 
tional  staff.  Therefore,  they  recognize  they  must  change  the  way  gsa 
analysts  process  aprs.  These  officials  are  studying  alternatives  such  as 
raising  the  dpa  threshold  for  agencies,9  eliminating  type  I  reviews,  and 
automating  certain  apr  review  processes.  In  addition,  gsa  officials 
recently  made  changes  to  strengthen  the  Federal  irm  Review  Program. 
They  have  created  a  dedicated  review  team,  identified  specific  irm  ini¬ 
tiatives  they  want  agencies  to  report  on,  plan  to  provide  a  critical 
assessment  of  agency  review  activities,  and  to  identify  30  major  infor¬ 
mation  system  initiatives  that  agencies  must  review  over  the  next  few 


sThe  Go-For-12  program  was  initiated  in  1986  to  find  ways  to  reduce  the  time  it  takes  federal  agen¬ 
cies  to  acquire  information  resources.  The  program  had  three  goals:  to  identify  and  eliminate  bottle¬ 
necks  in  the  acquisition  process,  to  assess  the  impact  of  a  parallel  process  of  review  and  approval  of 
APRs,  and  to  explore  opportunities  to  improve  training  in  acquisition-related  activities  such  as  con¬ 
tracting,  writing  specifications,  and  evaluating  proposals.  The  Trail  Boss  program  was  creates!  from 
the  Go-For- 1 2  program. 

9GSA  has  not  raised  the  $2.5  million  threshold  on  procurements  requiring  a  delegation  of  procure¬ 
ment  authority  since  September  1983. 
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years,  gsa  officials  have  also  developed  plans  to  conduct  on-site  reviews 
of  selected  agency  review  programs  to  verify  the  accuracy  of  the  infor¬ 
mation  being  reported. 

However,  gsa  could  do  more,  apr  review  analysts  do  not  collect  and  sum¬ 
marize  any  information  that  would  allow  them  to  measure  or  quantify 
the  benefits  from  each  type  of  apr  review.  As  a  result,  gsa  officials  do 
not  know  whether  allocating  their  limited  resources  differently  to  sup¬ 
port  an  increased  effort  in  any  one  type  of  review  would  result  in  a  pro¬ 
portionately  higher  level  of  benefit.  In  addition,  without  these  indicators 
it  is  difficult  to  assess  whether  delegating  reviews  to  agencies  would 
actually  result  in  any  net  benefit  to  gsa;  i.e.,  would  the  additional  time 
gained  to  review  type  II  and  type  III  aprs  offset  what  might  be  lost  by 
not  conducting  type  I  reviews. 

Further,  by  not  performing  any  global,  systematic  analysis  of  problems 
uncovered  in  individual  apr  reviews,  detailed  procurement  and  manage¬ 
ment  review's,  and  the  Federal  irm  Review  Program,  gsa  is  foregoing  any 
opportunity  to  identify  systemic  problems,  that  could  be  endemic  to 
procurements  of  a  particular  type  or  to  irm  activities  of  a  particular 
agency.  This  type  of  analysis  could  be  logged  into  a  data  base,  analyzed, 
and  used  during  training  sessions  and  meetings  with  agency  officials  to 
provide  critical  guidance  on  problem  areas.  The  information  could  also 
be  effectively  used  during  procurement  and  management  reviews  to 
focus  agency  attention  on  systemic  weaknesses.  However,  gsa  officials 
told  us  they  did  not  have  the  time  or  resources  to  collect,  summarize, 
and  evaluate  such  data  because  they  must  use  their  resources  on  what 
they  perceive  to  be  higher  priority  activities. 
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gsa’s  role  in  ensuring  efficiency  and  integrity  in  the  adp  procurement 
process  is  critical.  However,  gsa’s  process  for  reviewing  aprs  is  badly  in 
need  of  improvement.  Staffing  is  unstable,  turnover  is  high,  and  the 
office  environment  is  cluttered,  disorganized,  and  inefficient.  In  addi¬ 
tion,  the  automated  system  used  to  store  information  on  aprs  and  track 
their  status  through  the  process  is  not  updated  and  frequently  contains 
errors.  Combined  with  an  increasing  work  load,  this  creates  an  environ¬ 
ment  where  excellence  is  difficult  to  achieve. 

The  procurement  and  management  review  process  also  suffers  from 
staffing  instability.  As  a  result,  the  reviews  are  limited  in  number  and 
analysts  find  it  impossible  to  verify  agency  compliance  with  all  require¬ 
ments.  Nonetheless,  the  reviews  can  be  helpful  in  forcing  agencies  to 
improve  their  information  resource  management  and  individual  adp 
resource  procurements. 

Although  gsa  is  considering  alternatives  to  enhance  its  oversight,  it  has 
not  performed  the  analysis  necessary  to  make  informed  decisions,  gsa 
has  made  no  effort  to  assess  the  net  value  of  each  type  of  apr  review. 
Further,  gsa  does  not  summarize  or  analyze  its  individual  oversight 
accomplishments  to  identify  what  works  best  and  to  determine  what 
changes  are  needed.  By  not  performing  global,  systematic  analyses  of 
problems  uncovered  in  individual  apr  reviews,  procurement  and  man¬ 
agement  reviews,  and  the  Federal  irm  Review  Program,  gsa  is  foregoing 
any  opportunity  to  identify  systemic  problems  which  could  be  endemic 
to  procurements  of  a  particular  type  or  by  a  particular  agency. 


Recommendations 


gsa  needs  to  make  more  effective  use  of  its  primary  oversight  tools — the 
apr  review  process  and  the  procurement  and  management  reviews — to 
provide  greater  assurance  that  the  government’s  adp  resources  are  eco¬ 
nomically  and  efficiently  procured.  To  do  so,  we  recommend  that  the  gsa 
Administrator  take  the  following  actions. 

Collect  and  analyze  data  on  the  problems  identified  through  the  apr 
reviews  and  use  this  information  to  assess  the  value  added  by  each  type 
of  review.  If  necessary,  revise  the  three-tier  review  process  so  that  gsa’s 
limited  apr  resources  can  be  most  effectively  used. 

Improve  the  operating  efficiency  of  the  apr  review  process  by 
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1 .  enhancing  the  apr  data  base  so  that  it  will  accurately  and  automati¬ 
cally  show  whether  any  conditions/restrictions  placed  on  individual 
delegations  are  on  schedule,  due,  or  past  due,  and 

2.  developing  filing  and  workpaper  procedures  that  will  assist  analysts 
in  locating  apr  submissions  and  allow  auditors  to  verify  that  appro¬ 
priate  gsa  reviews  have  been  conducted. 

•  Implement  follow-up  and  assessment  procedures  to  validate  the  useful¬ 
ness  of  the  procurement  and  management  reviews.  Such  procedures 
should  include  a  tracking  system  to  identify  the  corrective  actions  taken 
by  agencies  as  a  result  of  these  reviews.  This  information  should  be  used 
to  determine  whether  the  reviews  should  be  ( 1 )  expanded  in  scope  to 
include  major  organizational  components  below  the  department  level, 
and  (2)  increased  so  that  agencies  are  reviewed  more  frequently  and 
receive  timely  information  on  how  to  best  manage  their  irm  and  procure¬ 
ment  activities. 

•  Use  the  results  of  the  apr  reviews,  the  procurement  and  management 
reviews,  and  the  Federal  irm  Review  Program  to  identify  systemic 
problems  that  require  special  attention. 
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gsa’s  Information  Resources  Management  Service  (irms)  has  organiza¬ 
tional  responsibility  for  fulfilling  the  legislative  mandate  imposed  by  the 
Brooks  Act.  In  this  regard,  its  general  responsibilities  include  ( 1 )  devel¬ 
oping  adp  policies  and  regulations  that  are  easy  to  understand  and 
implement,  (2)  providing  strong  and  continuing  oversight  of  delegated 
procurement  authorities  to  ensure  the  effective  management  of  irm 
activities  throughout  the  government,  and  (3)  making  innovative  and 
continuing  improvements  to  the  acquisition  process  to  ensure  the  easy, 
timely,  and  cost-effective  procurement  and  implementation  of  adp 
resources  and  services. 

IRMS  is  comprised  of  six  offices  with  a  total  authorized  staffing  level  of 
1,373.  These  offices  provide  technical  assistance,  administer  govern¬ 
ment  procurement  programs,  manage  gsa's  internal  irm  efforts,  and 
oversee  nationwide  telecommunications  services. 


Figure  1.1:  Information  Resources 
Management  Service 
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The  Office  of  Federal 
Information  Resources 
Management 


Figure  1.2:  Federal  Information 
Resources  Management 


Oversight  of  agency  adp  procurements  and  irm  activities  is  concentrated 
in  the  Office  of  Federal  Information  Resources  Management.  This  office 
is  the  focal  point  for  overseeing  the  acquisition  of  adp  resources  by  fed¬ 
eral  agencies.  Its  primary  responsibilities  include  policy  making, 
assisting  agencies,  and  overseeing  their  irm  and  procurement  activities. 
Our  review  focused  on  the  functions  in  this  office. 


The  Office  of  Federal  Information  Resources  Management  performs  five 
major  functions: 

Identifies  and  researches  emerging  problems  that  may  affect  federal  irm. 
This  is  done  through  governmentwide  conferences,  circulating  drafts  of 
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proposed  regulations  or  agency  guidance  for  comment,  and  conducting 
pilot  projects  with  agencies. 

•  Establishes  mandatory  guidance  on  adp  acquisitions  in  the  form  of  regu¬ 
lations  and  governmentwide  standards. 

•  Provides  assistance  to  federal  agencies  through  bulletins,  guidelines,  and 
advice  provided  by  gsa  analysts  and  liaison  staff. 

•  Grants  delegations  of  procurement  authority  to  agencies  to  acquire  adp 
equipment  and  services. 

•  Reviews  the  performance  of  agency  irm  programs  by  conducting  peri¬ 
odic  on-site  Information  Resources  Procurement  and  Management 
Reviews  and  through  an  annual  Federal  irm  Review  Program. 

Of  the  1 ,373  authorized  positions  assigned  to  IRMS,  111  are  assigned  to 
the  Office  of  Federal  Information  Resources  Management.  Ninety-two  of 
these  staff  are  assigned  to  its  Office  of  Information  Resources  Manage¬ 
ment  Policy,  which  is  primarily  responsible  for  performing  the  five 
functions  discussed  above.  This  office  uses  three  divisions  to  meet  its 
responsibilities — the  Authorizations  and  Management  Reviews  Division, 
the  Agency  Liaison  Officer  Program  Division,  and  the  Policy  and  Regula¬ 
tions  Division. 
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Figure  1.3:  Information  Resources 
Management  Policy 


The  Authorizations  and 
Management  Reviews 
Division 


The  Authorizations  and  Management  Reviews  Division,  with  49  author¬ 
ized  staff  positions,  performs  three  functions  vital  to  gsa’s  oversight 
efforts.  This  division  ( 1 )  reviews  agency  requests  for  authority  to  pro¬ 
cure  adp  systems  and  equipment  which  exceeds  a  gsa  established 
threshold — generally  $2.5  million,  (2)  conducts  information  resources 
procurement  and  management  reviews  at  selected  agencies,  and  (3) 
manages  the  Federal  ikm  Review  Program  required  by  the  Paperwork 
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The  Agency  Liaison 
Officer  Program  Division 


Reduction  Act  of  1980.'  These  functions  are  carried  out  by  staff  in  the 
Authorizations  Branch  and  the  Procurement  and  Management  Reviews 
Branch. 

The  Authorizations  Branch  has  22  authorized  staff  positions.  Its  pri¬ 
mary  responsibility  includes  reviewing  and  approving  agency  procure¬ 
ment  requests.  Federal  regulations  require  agencies  to  request  a  specific 
delegation  of  procurement  authority  for  adp  acquisitions  that  exceed  a 
gsa  established  procurement  threshold  level.  Analysts  in  the  Authoriza¬ 
tions  Branch  review  each  request  to  determine  whether  to  grant  a  dpa. 
During  fiscal  year  1989,  analysts  processed  632  aprs  totaling  over  $18 
billion  and  in  fiscal  year  1990  processed  735  aprs  totaling  over  $20 
billion. 

The  Procurement  and  Management  Reviews  Branch  has  17  authorized 
staff  positions  and  manages  two  irm  review  programs.  Under  one  pro¬ 
gram  it  conducts  information  resources  procurement  and  management 
reviews  at  federal  agencies.  These  reviews  assess  an  agency’s  effective¬ 
ness  in  managing  its  information  resources  activities.  In  addition  to 
helping  agencies  improve  their  irm  activities,  these  reviews  are  also  used 
as  a  basis  for  adjusting  an  agency’s  dpa  threshold.  Under  the  second  pro¬ 
gram,  the  Branch  manages  the  Federal  irm  Review  Program.  This  pro¬ 
gram  complies  with  a  statutory  requirement  of  the  Paperwork 
Reduction  Act.  It  requires  agencies  to  assess  and  report  on  their  own  irm 
initiatives.  Details  on  these  two  programs  and  the  apr  review  process 
are  contained  in  Chapters  1  and  2. 


The  Agency  Liaison  Officer  Program  Division,  with  six  authorized  staff 
positions,  provides  outreach  to  federal  agencies  by  establishing  training 
programs  and  providing  guidance  on  agency  procurement  requests  and 
other  irm  issues.  Liaison  officers  maintain  contact  with  agencies  with 
the  general  objective  of  facilitating  the  adp  procurement  process. 

A  recent  major  effort  of  this  office  was  the  establishment  of  the  Trail 
Boss  program.  This  program  provides  senior  managers  with  modem 
tools  and  current  insights  to  solve  the  complex  problems  involved  in 
major,  long-term  adp  and  telecommunications  acquisitions.  Over  300 


'Under  Section  2(a)  of  the  Paperwork  Reduction  Act  of  1080.  I’liblic  I,aw  9t>-5l 1 .  GSA  is  required  to 
assist  OMU  in  reviewing  the  IKM  activities  of  each  agency.  GSA  is  responsible,  under  the  Federal  IRM 
Review  Program,  for  collecting,  assessing,  and  reporting  on  agency  IRM  review  results  to  OMII 
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managers  from  various  federal  agencies  have  completed  the  Trail  Boss 
program. 

This  division  is  also  developing  two  additional  courses.  One  course  is  a 
follow-up  to  the  Trail  Boss  program  and  will  address  the  procurement 
process  beyond  the  point  of  contract  award.  The  other  course  will  pro¬ 
vide  contract  officer  training. 


The  Policy  and 
Regulations  Division 


The  Policy  and  Regulations  Division,  which  has  32  authorized  staff  posi¬ 
tions,  develops  and  issues  various  adp  regulatory  and  guidance  docu¬ 
ments  to  assist  federal  agencies  in  the  economic  and  efficient  acquisition 
of  irm  resources.  Most  important  among  these  guidelines  is  the  Federal 
Information  Resources  Management  Regulation,  which  governs  the 
acquisition,  management,  and  use  of  federal  information  processing 
resources  and  makes  the  use  of  standards  mandatory  in  information 
technology  acquisitions.  In  1990  the  division  completed  a  3-year  effort 
to  completely  rewrite  this  regulation;  the  revised  regulation  became 
effective  on  April  29,  1991.  The  Federal  Information  Resources  Manage¬ 
ment  Regulation  and  other  guidance  documents  help  ensure  that  agen¬ 
cies  have  sufficient  information  to  properly  interpret  and  implement 
govemmentwide  adp  policy. 

Staff  in  this  division  also  work  with  agency  officials  to  identify 
emerging  problems  in  the  area  of  information  technology  that  may 
require  new  policy  and  guidance.  In  addition,  they  review  proposed  leg¬ 
islation  to  ensure  that  it  does  not  improperly  affect  gsa’s  implementa¬ 
tion  of  its  responsibilities  to  oversee  information  technology  resources. 
The  division  is  further  responsible  for  the  govemmentwide  development 
and  implementation  of  federal  telecommunications  standards. 


Brooks  Act 
Responsibilities  of  the 
Remaining  IRMs 
Offices 


The  remaining  five  irms  offices  also  have  responsibilities  relating  to  the 
Brooks  Act.  Their  missions  and  functions  are  described  below. 
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Appendix  I 

Organizational  Components  of  GSA’s 

Information  Resources  Management  Service 

The  Office  of  Technical 
Assistance 

The  Office  of  Technical  Assistance  has  156  authorized  staff  positions. 

Its  mission  is  to  “improve  the  economy,  efficiency,  and  effectiveness  of 
federal  irm  by  providing  expertise  for  the  government.”  This  office  car¬ 
ries  out  its  responsibilities  by  providing  technical  and  contractual  ser¬ 
vices  in  areas  related  to  the  acquisition,  management,  and  use  of 
information  systems  and  information  technology.  It  assists  federal  agen¬ 
cies  by  (1)  providing  direct  technical  support,  (2)  awarding  and  adminis¬ 
tering  governmentwide  contracts  that  provide  economies  of  scale  and 
cost  savings  for  pe^eipating  agencies,  and  (3)  supporting  a  govem- 
mentwide  ii  ~matiun  transfer  program  that  includes  conferences,  semi¬ 
nars,  and  pu  cations. 

The  Office  of  the 

Controller 

The  Office  of  the  Controller  has  99  authorized  staff  positions.  Its  pri¬ 
mary  mission  relating  to  the  Brooks  Act  is  to  manage  the  Information 
Technology  fund,2  a  revolving  fund  through  which  gsa  provides  and 
finances  a  variety  of  services  and  assistance  to  federal  agencies, 
including  FTS  2000 — the  government’s  primary  telecommunications 
network.  The  Office  of  the  Controller  is  responsible  for  ensuring  the 
integrity  of  the  fund’s  financial  procedures,  processes,  and  controls  and 
for  ensuring  the  integrity  of  financial  information  generated  and  used 
by  the  fund’s  adp  and  telecommunications  programs. 

The  Office  of  Information 
Resources  Procurement 

The  Office  of  Information  Resources  Procurement  has  179  authorized 
staff  positions.  The  Office  is  responsible  for  awarding  and  administering 
contracts  for  governmentwide  procurement  programs,  as  well  as  for  pre¬ 
paring  specific  adp  and  telecommunications  requirements  for  gsa  activi¬ 
ties.  This  office  also  provides  contractual  support  to  the  Office  of 

Technical  Assistance  for  its  acquisitions  on  behalf  of  other  federal  agen¬ 
cies.  Other  responsibilities  include  ensuring  that  contractual  actions  are 
handled  in  accordance  with  the  Brooks  Act  and  other  procurement  laws. 

The  Office  of  GSA 
Information  Resources 
Management 

The  Office  of  gsa  Information  Resources  Management  has  118  author¬ 
ized  staff  positions.  Its  responsibilities  are  to  (1)  formulate  internal  gsa 
policy  and  develop  procedures  and  guidelines  for  gsa’s  acquisition, 
development,  and  use  of  information  systems,  equipment,  and  facilities; 

(2)  identify  agencywide  information  needs  and  provide  ready  access  to 
information  for  decision-making  purposes;  and  (3)  provide  general  sup¬ 
port  services,  such  as  shared  computing  resources. 

Established  .lanuary  1.  1987.  by  the  Paperwork  Reduction  Rrauthnrization  Act  of  1989,  P  I.  99-500 
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Appendix  I 

Organizational  Components  of  GSA's 
Information  Resources  Management  Service 


The  Office  of 

Telecommunications 

Services 


The  Office  of  Telecommunications  Services  has  685  authorized  staff 
positions.  It  is  responsible  under  the  Brooks  Act  for  providing  a  unified 
telecommunications  system  by  coordinating  services  with  other  agencies 
who  operate  telecommunications  systems  under  delegations  from  gsa. 
This  office  represents  the  largest  share  of  authorized  staff  positions  in 
irms.  Its  responsibilities  include  management  of  FTS  2000  and  other 
nationwide  telecommunications. 
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